This can probably be expressed so:

Events are aggregated on the Event Stream based on 'hostname/event_type/source_type/aggregation_key'
If `event_type` is empty, the event will be grouped with other events that don't have an `event_type`.